2FA problem - OTP key causes SSH password login to fail

General questions
1

Hello all,

I’ve tried enabling 2FA for system login on both VyOS 1.4 & 1.5, but after configuring an OTP key for a local user, SSH password logins start failing (“Permission denied (publickey,password)”) and I never get an OTP prompt. If I remove the OTP key, password login works again. I’m curious if I’m doing something incorrectly. I reviewed the info from this Login/User Management doc, but I couldn’t find any solutions.

For the sake of testing, I tried enabling KbdInteractiveAuthentication in my /run/sshd/sshd_config then restarted SSH, but this had no effect.

Any guidance would be appreciated. Thanks!

2

Figured it out - didn’t notice this little line:

For example: If the users password is vyosrocks and the OTP code is 817454 then they would enter their password as vyosrocks817454